Enforce IP filtering on ESXi

My ESXi is provided by Online.net and accessible from Internet. Reading the VMware documentation, one can see:

ESXi includes a firewall that is enabled by default.

At installation time, the ESXi firewall is configured to block incoming and outgoing traffic, except traffic for services that are enabled in the host’s security profile.

But the default security profile is way too loose! So here’s how to harden it a bit.

Continue reading “Enforce IP filtering on ESXi”

Upgrade VMware ESXi 6.5 to 6.7 using the esxcli console tool

I decided to run VMware ESXi on my Online/Scaleway Start-2-L server. Using the online.net installer, you can “only” get ESXi 6.5.0d (64BITS). So here’s how to upgrade to 6.7.

Continue reading “Upgrade VMware ESXi 6.5 to 6.7 using the esxcli console tool”

Upgrade ESXi from 5.0 to 5.1 without vCenter or Update Manager

Following the idea that ESXi can be updated without vCenter or Update Manager, I upgraded my ESXi from 5.0 to 5.1. As I don’t own a vCenter, I did it using the console and esxcli.
Continue reading “Upgrade ESXi from 5.0 to 5.1 without vCenter or Update Manager”