<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Setting up Hyper-V with NAT</title>
	<atom:link href="http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=setting-up-hyper-v-with-nat</link>
	<description></description>
	<lastBuildDate>Fri, 25 Mar 2011 23:06:26 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>By: Christian Blaich</title>
		<link>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/comment-page-1/#comment-318</link>
		<dc:creator>Christian Blaich</dc:creator>
		<pubDate>Fri, 25 Mar 2011 23:06:26 +0000</pubDate>
		<guid isPermaLink="false">http://blog.jim80.net/?p=344#comment-318</guid>
		<description>Works fine for me on a 1and1 rootserver.
I used the Nat from the wizard and not the custom config.
Part 11 your Subnet is not 255.255.255.255 it is 255.255.255.0</description>
		<content:encoded><![CDATA[<p>Works fine for me on a 1and1 rootserver.<br />
I used the Nat from the wizard and not the custom config.<br />
Part 11 your Subnet is not 255.255.255.255 it is 255.255.255.0</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jim</title>
		<link>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/comment-page-1/#comment-296</link>
		<dc:creator>jim</dc:creator>
		<pubDate>Tue, 22 Feb 2011 06:27:00 +0000</pubDate>
		<guid isPermaLink="false">http://blog.jim80.net/?p=344#comment-296</guid>
		<description>Hey Emmanuel!

Thanks for your patronage! I used to field this particular Hyper-V question a bit when I was with the Support Department, before I switched roles to internal assets. That being said, ServerBeach&#039;s networking structure when it comes to secondary IP&#039;s does require a little bit of extra work to function correctly. 

Let me answer your question with two answers, the first being, yes you can do it. The second being, I recommend not. Let me explain how it can be done first: 

Instead of creating reservations, you can click on the &quot;Services and Ports&quot; tab, and add each individual port that you want mapped to the private IP. Click &quot;Add&quot; give the service a name, select the incoming IP (public) and port, then define the outgoing (private) IP and port. Click OK, and that IP/Port is mapped. 

When you set your reservations, and I can&#039;t believe I didn&#039;t note this above, if you click &quot;allow incoming connections,&quot; then every packet that comes in gets forwarded to the private IP. If you set this, whatever you configure in the &quot;Services and Ports&quot; tab gets overwritten by RRAS, and defaults to whatever is reserved. If you do not check &quot;allow incoming connections,&quot; then the private IP is not remotely accessible regardless of the settings in &quot;Services and Ports.&quot; It&#039;s really a one or the other configuration. 

That being said, I recommend forwarding the whole block using reservations, checking &quot;allow incoming connections,&quot; and performing packet filtering either outside the host (external firewall), or internal to the VM (windows firewall or iptables in the guest). Primarily, the reason I say this is ease of troubleshooting. If firewalling is handled either external to your host, or internal to your VM, then it comes naturally to look there than it would be to troubleshoot issues with RRAS, which IMHO, isn&#039;t very robust. Furthermore, troubleshooting measures that incorrectly configure RRAS can quickly result in more VMs offline than the original outage.  

There is a drawback to reservations in that the more packets that the VM handles rather than the host, there is a greater impact to performance (virtualized hardware translates into greater cpu time per transaction). However, I believe that ease of administration is ultimately more desirable than squeezing a bit of performance out of the VMs in what can quickly turn into a very long list of ports. This becomes very important when problems require urgent work. 

Well, I hope this helps you out with setting up your Hyper-V environment. Please let me know if I can answer any more questions, and also, feel free to hit up our support guys and gals if you need any help with your server specifically.


Jim

EDIT: I just reread your comment, and I see that you have some services sharing IPs. I&#039;d actually recommend getting more IPs in this case and going with a 1 IP per virtual model. They&#039;re $1 per IP per month, so the outlay isn&#039;t really that bad.</description>
		<content:encoded><![CDATA[<p>Hey Emmanuel!</p>
<p>Thanks for your patronage! I used to field this particular Hyper-V question a bit when I was with the Support Department, before I switched roles to internal assets. That being said, ServerBeach&#8217;s networking structure when it comes to secondary IP&#8217;s does require a little bit of extra work to function correctly. </p>
<p>Let me answer your question with two answers, the first being, yes you can do it. The second being, I recommend not. Let me explain how it can be done first: </p>
<p>Instead of creating reservations, you can click on the &#8220;Services and Ports&#8221; tab, and add each individual port that you want mapped to the private IP. Click &#8220;Add&#8221; give the service a name, select the incoming IP (public) and port, then define the outgoing (private) IP and port. Click OK, and that IP/Port is mapped. </p>
<p>When you set your reservations, and I can&#8217;t believe I didn&#8217;t note this above, if you click &#8220;allow incoming connections,&#8221; then every packet that comes in gets forwarded to the private IP. If you set this, whatever you configure in the &#8220;Services and Ports&#8221; tab gets overwritten by RRAS, and defaults to whatever is reserved. If you do not check &#8220;allow incoming connections,&#8221; then the private IP is not remotely accessible regardless of the settings in &#8220;Services and Ports.&#8221; It&#8217;s really a one or the other configuration. </p>
<p>That being said, I recommend forwarding the whole block using reservations, checking &#8220;allow incoming connections,&#8221; and performing packet filtering either outside the host (external firewall), or internal to the VM (windows firewall or iptables in the guest). Primarily, the reason I say this is ease of troubleshooting. If firewalling is handled either external to your host, or internal to your VM, then it comes naturally to look there than it would be to troubleshoot issues with RRAS, which IMHO, isn&#8217;t very robust. Furthermore, troubleshooting measures that incorrectly configure RRAS can quickly result in more VMs offline than the original outage.  </p>
<p>There is a drawback to reservations in that the more packets that the VM handles rather than the host, there is a greater impact to performance (virtualized hardware translates into greater cpu time per transaction). However, I believe that ease of administration is ultimately more desirable than squeezing a bit of performance out of the VMs in what can quickly turn into a very long list of ports. This becomes very important when problems require urgent work. </p>
<p>Well, I hope this helps you out with setting up your Hyper-V environment. Please let me know if I can answer any more questions, and also, feel free to hit up our support guys and gals if you need any help with your server specifically.</p>
<p>Jim</p>
<p>EDIT: I just reread your comment, and I see that you have some services sharing IPs. I&#8217;d actually recommend getting more IPs in this case and going with a 1 IP per virtual model. They&#8217;re $1 per IP per month, so the outlay isn&#8217;t really that bad.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Emmanuel</title>
		<link>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/comment-page-1/#comment-294</link>
		<dc:creator>Emmanuel</dc:creator>
		<pubDate>Sun, 20 Feb 2011 14:24:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.jim80.net/?p=344#comment-294</guid>
		<description>Hi Jim! Is there a way I can map ports of my secondary ip address to different ips on my virtual network?
I need something like this:

Primary ip address: 1.2.3.4
Secondary ip address: 1.2.3.5

1.2.3.4:80 -&gt; 192.168.1.2:80
1.2.3.5:80 -&gt; 192.168.1.3:80
1.2.3.5:25 -&gt; 192.168.1.4:25 

Thanks!

BTW I&#039;m a SB-Peer1 customer.</description>
		<content:encoded><![CDATA[<p>Hi Jim! Is there a way I can map ports of my secondary ip address to different ips on my virtual network?<br />
I need something like this:</p>
<p>Primary ip address: 1.2.3.4<br />
Secondary ip address: 1.2.3.5</p>
<p>1.2.3.4:80 -&gt; 192.168.1.2:80<br />
1.2.3.5:80 -&gt; 192.168.1.3:80<br />
1.2.3.5:25 -&gt; 192.168.1.4:25 </p>
<p>Thanks!</p>
<p>BTW I&#8217;m a SB-Peer1 customer.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

