You plan to use a Hyper-v host server to host virtual desktops for external customers.
You have the following requirements:
Individual virtual machines (VMs) must be isolated from one another.
VMs must have access to the Internet.
IP addresses should be used in the most efficient manner possible. The configuration must minimize
administrative effort and management complexity.
You need to configure the virtual environment.
What should you do?
A.
Configure a port virtual local area network (PVLAN). Connect all new VMs to the PVLAN.
B.
Configure virtual networking with network isolation. Create a unique VM network for each VM.
C.
Deploy VMs to the same VM network. Enable DHCP Guard and Router Guard network extensions.
D.
Configure a virtual network with no isolation. Deploy VMs to the same VM network.
Configure Windows firewall on each VM to prevent the VM from communicating with other VMs on the
same VM network.
is A is the right answer?
yes, the only other plausible is B as that also would isolate the VM’s. But’s not really efficient to do so.
I think it’s A.
According to the definition of Port Virtual Local Area Network (PVLAN) and Trunk Mode feature:
PVLAN can be used to create an environment where VMs may only interact with the Internet and not have visibility into other VMs’ network traffic. To accomplish this put all VMs (actually their Hyper-V switch ports) into the same PVLAN in isolated mode. Therefore, using only two VLAN IDs, primary and secondary, all VMs are isolated from each other.
Answer is A.
PVLANs allow virtual machines to all be on the same subnet but only talk to the router, therefore they have Internet access, networking is simplified, but they cannot talk to each other.
A: http://technet.microsoft.com/en-us/library/jj679878.aspx#bkmk_pvlan
The answer is A. The only way for create a complete isolation is vlan. Look this:
https://technet.microsoft.com/en-us/library/jj134230.aspx