Configuring Port ACLs in Windows Server 2012 Hyper-V Virtual Machine
ACLs (Access Control Lists) are essentially a list of permit or deny statements that control network access to enforce a security policy. ACLs are an integral part of end-to-end security solution. Windows Server 2012 Hyper-V introduces new feature called Port ACLs. Using Port ACLs, rules can be applied to a Hyper-V switch port. The rules specify whether packets are allowed or denied on their way in or out of the VMs. So Port ACLs will act as Cisco router ACLs, where we define the direction, address and action for network rules. But Windows Server 2012 Hyper-V Port ACLs will not block the network traffic based on source and destination ports. For this feature we have to install third party software such as 5NINE software in Hyper-V host. To configure Port ACLS in Hyper-V, we use PowerShell. There is no GUI (Graphical User Interface) till now.
There are three available commands to configure Port ACLs in Hyper-V.
1. Get-VMNetworkAdapterAcl — View the existing ACLs
2. Add-VMNetworkAdapterAcl — Add the new ACLs
3. Remove-VMNetworkAdapterAcl — Remove the existing ACLs
In Kathmandu lab scenario:
- LEG-VM1 will be accessed only from Legal Dept. network (192.168.9.0/24)
- Block access to LEG-VM1 from HR Dept. network (192.168.11.0/24) and Admin Dept. single IP Address (192.168.10.98)
5NINE software Console
With Port ACLs , we have basic virtual firewall for virtual machines. For the granular filtering for virtual machines, we need 5nine software.
- Configuring a Point-to-Site Connection to a VNet using Azure Portal - November 28, 2017
- Configuring a VNet-to-VNet VPN Gateway Connection Using the Azure Portal - October 27, 2017
- Configuring Azure VNet Peering by using the Azure Portal - October 19, 2017
- Using the Azure Portal to Create Virtual Networks, Add Subnets and Setting up a DNS Server Address - October 17, 2017
- Extend Azure Virtual Machine OS drive using Azure Portal - June 30, 2017
- Creating a Windows Virtual Machine and Availability Set at the same time using the Azure Portal - June 11, 2017
- Remove a Node from a Windows Server 2016 Hyper-V Cluster and Destroy a Cluster Procedure - May 14, 2017
- Best Practices on Setting up Hyper-V Cluster Networks in Windows Server 2016 - May 10, 2017
- Implementing Failover Clustering with Windows Server 2016 Hyper-V - May 6, 2017
- Configuring iSCSI Storage and Initiator in Windows Server 2016 - April 20, 2017